  location <%= location %> {
    deny all;
  }
